PT-2006-6071 · Oracle · Oracle Application Express

Published 2006-10-18 · Updated 2018-10-17 · CVE-2006-5351

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 1.5 up to 2.0

Description The issue affects Oracle Application Express and has unknown impact with remote attack vectors. It is likely associated with cross-site scripting (XSS) in WWV FLOW ITEM HELP and NOTIFICATION MSG.

Recommendations For Oracle Application Express versions 1.5 up to 2.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2006-5351

Affected Products

Oracle Application Express

References · 9

• http://vupen.com/english/advisories/2006/4065 · Vendor Advisory
• http://secunia.com/advisories/22396 · Vendor Advisory
• http://securityfocus.com/archive/1/449711/100/0/threaded · Vendor Advisory
• http://securityfocus.com/bid/20588 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-5351 · Security Note
• http://us-cert.gov/cas/techalerts/TA06-291A.html · Note
• http://securitytracker.com/id?1017077 · Note
• http://red-database-security.com/advisory/oracle_cpu_oct_2006.html · Note
• http://oracle.com/technetwork/topics/security/cpuoct2006-095368.html · Note